esx host level av scanning cisco ise 2.7

[craiglebutt]

HI

Just upgrading to ISE 2.7, our DC team say with need to have AV installed for ISE.

Is this possible, iust there any exceptions that need to be put in?

I can't find any thing regarding this.

cheers

[Mike.Cifelli · Accepted solution]

AFAIK this is not possible.  See here for hardening best practices: ISE Security Best Practices (Hardening) - Cisco Community

HTH!